Overview

overview

10

Static

static

10

00a41ae28e...18.exe

windows7-x64

10

00a41ae28e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00a41ae28e49bb972c531c47c0365206_JaffaCakes118

  • Size

    2.2MB

  • MD5

    00a41ae28e49bb972c531c47c0365206

  • SHA1

    690d2267ea9a6462c9a9a9aea5d922b9d23b00c7

  • SHA256

    47c4212040b0c2e9bb3d2fe7e2471e91c05cf3044daaa4efe6769102f440129c

  • SHA512

    367e0c442ddc19c46441215c865144de69b397e240f793d3625bdd93c5e78bdb199a63e4f6040760864b73c2741af91c34dc7005a567b321b8b026d409f52001

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZT:0UzeyQMS4DqodCnoe+iitjWww3

Score
10/10
pony

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
    pony
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00a41ae28e49bb972c531c47c0365206_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections